CVE-2020-5318

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are enabled, and Basic Authentication is enabled for either or both components, files are accessible without authentication.

• CWE-285
• CWE-863

• https://www.dell.com/support/security/en-us/details/540708/DSA-2020-018-Dell-EMC-Isilon-OneFS-Security-Update-for-Improper-Authorization-VulnerabilityVendor Advisory
• https://www.dell.com/support/security/en-us/details/540708/DSA-2020-018-Dell-EMC-Isilon-OneFS-Security-Update-for-Improper-Authorization-VulnerabilityVendor Advisory

Published

Feb 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5311libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI …9.8
• CVE-2020-5312libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mo…9.8
• CVE-2020-5313libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buf…7.1
• CVE-2020-5315Dell EMC Repository Manager (DRM) version 3.2 contains a pla…8.8
• CVE-2020-5316Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0…7.8
• CVE-2020-5317Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulner…4.8
• CVE-2020-5319Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA ver…7.5
• CVE-2020-5320Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 a…7.2
• CVE-2020-5321Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 a…7.6
• CVE-2020-5322Dell EMC OpenManage Enterprise-Modular (OME-M) versions prio…9.1
• CVE-2020-5323Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 a…8.1
• CVE-2020-5324Dell Client Consumer and Commercial Platforms contain an Arb…4.4